搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Certificate error on only one of two identical systems?

  • 2 回覆
  • 25 有這個問題
  • 1 次檢視
  • 最近回覆由 cor-el

more options

I recently installed two COMPLETELY identical Ubuntu 12.04 systems, PC01 and PC02. The browser is latest version of Mozilla Firefox.

When visiting https://www.komplett.dk/k/signin.aspx with PC01, the connection is secure and everything is OK, no error messages. When visiting the same URL with PC02, the following error message is shown:

--- This Connection is Untrusted

You have asked Firefox to connect securely to www.komplett.dk, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.

What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

Get me out of here!

Technical Details

www.komplett.dk uses an invalid security certificate.

The certificate is not trusted because no issuer chain was provided.

(Error code: sec_error_unknown_issuer)

I understand the Risks ---

Why is this happening when the systems are COMPLETLY identical? i have tried to delete the profile folder on both systems, but the result is the same. NO certificates has been manually installed on PC01, so that is not the reason. The file size of cert8.db on PC01 is 94K and on PC02 it is 64K, I do not understand how the size can be different when the profiles are newly created.

I would really like to find out why I am experiencing different behaviour with Firefox, on two identical systems, so any suggestions or ideas are very welcome.

I recently installed two COMPLETELY identical Ubuntu 12.04 systems, PC01 and PC02. The browser is latest version of Mozilla Firefox. When visiting https://www.komplett.dk/k/signin.aspx with PC01, the connection is secure and everything is OK, no error messages. When visiting the same URL with PC02, the following error message is shown: --- This Connection is Untrusted You have asked Firefox to connect securely to www.komplett.dk, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified. What Should I Do? If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue. Get me out of here! Technical Details www.komplett.dk uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer) I understand the Risks --- Why is this happening when the systems are COMPLETLY identical? i have tried to delete the profile folder on both systems, but the result is the same. NO certificates has been manually installed on PC01, so that is not the reason. The file size of cert8.db on PC01 is 94K and on PC02 it is 64K, I do not understand how the size can be different when the profiles are newly created. I would really like to find out why I am experiencing different behaviour with Firefox, on two identical systems, so any suggestions or ideas are very welcome.

被選擇的解決方法

Note that Firefox automatically stores intermediate certificates that servers send in the Certificate Manager for future usage.
So you may not see an error if you have visited a website in the past that did send this intermediate certificate.
If you have never visited a website that uses this same intermediate certificate then Firefox hasn't saved it and you will get an untrusted error.

從原來的回覆中察看解決方案 👍 12

所有回覆 (2)

more options

The Technical Details show:

www.komplett.dk uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)

The www.komplett.dk server doesn't send a required intermediate certificate.

  • VeriSign Class 3 Extended Validation SSL SGC CA

You can inspect the certificate chain via a site like this:

You can install the intermediate certificate from networking4all site or from this VeriSign page (it is the second one).

Copy the certificate text to a .cer text file and import this file in the Certificate Manager.

  • Options/Preferences > Advanced > Encryption: Certificates - View Certificates
more options

選擇的解決方法

Note that Firefox automatically stores intermediate certificates that servers send in the Certificate Manager for future usage.
So you may not see an error if you have visited a website in the past that did send this intermediate certificate.
If you have never visited a website that uses this same intermediate certificate then Firefox hasn't saved it and you will get an untrusted error.